Advanced

Super-Admin

Let a role bypass every permission check.
config/permissions.ts
defineConfig({
  // ...
  superAdmin: {
    enabled: true,
    role: 'Super-Admin',
  },
})

Users with the configured role pass every permission check (can, hasPermissionTo, middlewares...) without needing the permissions assigned.

await user.assignRole('Super-Admin')
await user.can('anything') // true
The bypass is disabled by default. Only enable it if you control who can receive that role.